Confirmed: It was a management problem. I noticed in CrowdStrike's post mortem report that they didn't say a thing about management.

Two months on from the global IT outage on 19 July, the full impact is still only now becoming apparent.

The concentration of so much mission-critical technology in the hands of a few large suppliers makes incidents like the Microsoft-CrowdStrike outage all the more dangerous.

Clearly there weren't any code review workflow processes in place, which is astonishing. That's why our primary focus is-transparency, accountability, and system integrity to bring a decentralized, transparent, and reliable platform for journalists, researchers, scientists, and content creators.

While they're still blaming Microsoft as if it isn't possible to run the code they update outside of the kernel and only use the kernel mode code for observation and action, but not logic.